6313 matches found
CVE-2019-6961: Missing Authorization
Incorrect access control in actionHandlerUtility.php in the RDK RDKB-20181217-1 WebUI module allows a logged in user to control DDNS, QoS, RIP, and other privileged configurations intended only for the network operator by sending an HTTP POST to the PHP backend, because the page filtering for...
CVE-2019-3411
All versions up to BDR218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components...
Information disclosure
All versions up to BDR218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components...
CVE-2019-3411
All versions up to BDR218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components...
CVE-2019-3411: Missing Authentication for Critical Function
All versions up to BDR218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components...
PT-2019-16563
Name of the Vulnerable Software and Affected Versions ZTE MF920 versions up to BD R218V2.4 Description The issue allows an attacker to obtain sensitive information about the affected components due to certain interfaces being able to obtain the WebUI login password without requiring a login. This...
agrisoln (1.0.0), drafty (>=0.1.14, <=0.2.37) +1 more potentially affected by unknown CVE via react-svg (>=2.1.10, <=2.1.22)
react-svg NPM version =2.1.10, =0.1.14, =0.2.37 - pcs-remote-monitoring-webui 1.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-8XQR-4CPM-WX7G...
agrisoln (1.0.0), drafty (>=0.1.14, <=0.2.37) +1 more potentially affected by unknown CVE via react-svg (>=2.1.10, <=2.1.22)
react-svg NPM version =2.1.10, =0.1.14, =0.2.37 - pcs-remote-monitoring-webui 1.0.0 Source cves: unknown CVE Source advisory: GHSA-8XQR-4CPM-WX7G...
CVE-2019-6814
A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker crafts a malicious request to the encoder webUI...
Authentication flaw
A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker crafts a malicious request to the encoder webUI...
CVE-2019-6814
The Schneider Electric Pelco Endura NET55XX Encoder is affected by a CWE-287: Improper Authentication vulnerability in firmware versions prior to 2.1.9.7 . A remote attacker can craft malicious requests to the device's webUI to bypass authentication, potentially leading to the compromise of confi...
CVE-2019-6814
A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker crafts a malicious request to the encoder webUI...
CVE-2019-6814: Improper Authentication
A CWE-287: Improper Authentication vulnerability exists in the NET55XX Encoder with firmware prior to version 2.1.9.7 which could cause impact to confidentiality, integrity, and availability when a remote attacker crafts a malicious request to the encoder webUI...
Schneider Electric NET55XX Encoder Access Control Error Vulnerability
The Schneider Electric NET55XX Encoder is a video encoder from Schneider Electric France. An access control error vulnerability exists in the Schneider Electric NET55XX Encoder using firmware versions prior to 2.1.9.7. When a remote attacker sends a malicious request to the encoder webUI,...
CVE-2019-11816
Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request...
CVE-2019-11816
Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request...
Design/Logic Flaw
Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request...
CVE-2019-11816
CVE-2019-11816 affects the WebUI of OPNsense prior to 19.1.8 and pfSense prior to 2.4.4-p3. The root cause is incorrect access control, allowing remote authenticated users to escalate privileges to administrator via a specially crafted request. Affected products: OPNsense (WebUI) and pfSense (Web...
CVE-2019-11816
Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request...
CVE-2019-11816
Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request...